Century College CVF 1065 Computer Forensics  Week 4 Practical Assignment CVF1065 Introduction to Computer Forensics & Investigations Processing Crime and Incident Scenes

Century College CVF 1065 Computer Forensics  Week 4 Practical Assignment CVF1065 Introduction to Computer Forensics & Investigations Processing Crime and Incident Scenes This week we discussed “metadata”. This term is used a lot in the computer forensics field. When discussing bit-stream images we described how the case information can be added to the raw data. This is the case when creating images with FTK Imager or ProDiscover; this is the “metadata” of the forensic image. We have used IrfanView (plugins) and windows properties to view jpeg image metadata, which is called EXIF data. FTK Toolkit and ProDiscover also allow you to find clues in EXIF data! The compressed file Homework_WK contains to following 2 files. I 015d69fa4cf6f67cf068c508ed I 4498a4309fe4231dab452cb68ef383ab 1. Can a location be validated? - 25 pts. Using ANY of the tools or methods covered in class or any tools you can find on the internet, identify the following information about I a. Camera Make - b. Camera Model – c. Time/date the photo was taken – d. The city this picture was taken – e. If the Geo Tag information accurate (within a block). Explain why or why not. 2. Some things are not always what they seem. - 25 pts. We have probably all attached digital picture files to emails and sent them to friends or family. The file I is an example of several ways that people can pass MUCH more than a pretty picture. Using ANY of the tools covered in class or tools you find online, answer the following questions.